Paul Ducklin, principal research scientist at IT security company Sophos, offers some tips for keeping IoT devices and other connected computers secure at home – especially if you are working from home as well.
Ducklin says there are seven questions you should ask yourself about devices on your home network and about the setup of your network in general. Think of it as going through your very own Cybersecurity Awareness Month at home.
1. Do I actually need this device online? If not, consider removing it from your network. Or if you don't need it listening in or activated all the time, consider powering it down when you aren't using it. (Simply unplugging it from the wall socket is often all you need to do.)
2. Do I know how to update it? If not, find out how; if the vendor can't reassure you about security updates, consider switching products to a vendor that does (and see step 1).
3. Do I know how to configure it? Make sure you know what security settings are available, what they are for, and how to set them up (and see step 2).
4. Have I changed any risky default settings? Many IoT devices come with remote troubleshooting features turned on, which crooks may be able to abuse, and default passwords, which the crooks will definitely know. Check and change defaults before you make the device live (and see step 3).
5. How much am I sharing? If the device is hooked up to an online service, familiarise yourself with how much data the device is sharing, and how often. You may be happy to share some data, but never feel squeezed into turning all the options ‘to the max’ (and see steps 3 and 4).
6. Can I ‘divide and conquer’ my network? Some home routers let you split your Wi-Fi into two networks that can be managed separately. This is useful if you are working from home because it means you can put your home IoT devices on a ‘guest’ network and your work devices, such as a laptop, on another.
7. Do I know who to turn to if there's a problem? If your work has an IT department or offers access to tech support, make sure you know where to report anything suspicious. Ask them what information they are likely to need and provide it at the outset in order to speed up the process.
“By the way,” adds Ducklin, “if you're an IT department looking after remote workers, make it easy for your less-technical colleagues to reach out for cybersecurity advice, or to report suspicious activity, and take the attitude that there's no such thing as a stupid question.”
From the editor's desk: Local can be international Technews Publishing
Editor's Choice News
Welcome to the July 2026 issue of Dataweek. As you can see from this introduction, Dataweek’s regular editor, Peter Howells, is on extended leave and I am filling the void in his editor’s column – hopefully without being too boring.
Read more...AI-controlled swarms: Algorithmic warfare Technews Publishing
AI & ML
The rapid proliferation of Unmanned Aerial Systems (UAS), ranging from hobbyist quadcopters to sophisticated munitions-carrying military drones, has fundamentally altered the security landscape and come to the fore with the current war in the Middle East.
Read more...Engineering in a world that cannot assume connectivity Technews Publishing
Editor's Choice News
Across industrial automation, networking, and defence systems, engineers are rediscovering the importance of resilience and autonomy in an increasingly connected world.
Read more...From the editor's desk: Engineering the future Technews Publishing
Editor's Choice
As we welcome the first issue of Dataweek in a new year, it is an exciting time to be part of the electronics community, especially for our readers. The pace of change across our industry continues to accelerate, reshaping how we design, build, and interact with technology.
Read more...Is it time for Wi-Fi 7 in SA? Technews Publishing
Editor's Choice Telecoms, Datacoms, Wireless, IoT
Wi-Fi 7, the IEEE 802.11be standard also known as Extremely High Throughput, is the next-gen wireless networking standard designed to dramatically improve speed, latency, efficiency, and reliability.
While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.
printer friendly version